Transfer Logins Task
Database Administrators can use the Transfer Logins Task to transfer logins between different instances of SQL Server. Using this task you can either transfer all the logins from one SQL Server Instance to another SQL Server Instance, transfer only specific logins, or transfer only logins which have access to a specific user database.
At the destination server, the transferred SQL Server Logins are by default disabled and are assigned a random password. Once the task is complete, the DBA needs to assign the correct password for the SQL Server account and enable the logins to allow users to access the database. However, using the Transfer Logins Task you cannot transfer “sa” logins (including renamed “sa” logins) between different instances of SQL Server.
In this Article, before starting with Transfer Logins task, let us create a new login user.
Remember, I’m Transferring LOGIN Credentials from NSW1041\ADMIN123 to NSW1069\ADMIN123
Here I’m creating a new LOGIN USER called “ROCKY” with Password “dhina” in ROCKY DATABASE in NSW1041\ADMIN123 server.
So let us select ROCKY database, right click, and select new query.
The query for creating LOGIN USER is as follows:
Now u can refresh the NSW1041\ADMIN123 once and you can select SECURITY folder and expand it. Select Login subfolder and expand it. Here you can see ROCKY login User is created.
Now open BIDS, Drag and drop TRANSFER LOGIN TASK from Control Flow.
Obviously small Red Cross button on task tells it is not configured yet. So Right click on TRANSFER LOGIN TASK and select Edit option.
Now select Logins tab and Under Connections, fill the Source and Destination server address.
Now Under Logins, We can find option logintotransfer.
Select dropdown button at logintotransfer and there are three options under logintotransfer menu.
1) AllLogins: Which will transfer all the users’ creditentials of source server?
2) SelectedLogins: Which will select particular User login to be transferred to destination?
3) AllLogInFromSelectedDatabase: This will transfer different login users which are created in different database.
Well, as we created new login User, we will select SelectedLogins option under Logins.
Then go to LoginLists and check mark ROCKY.
Next come to Options. If the logins already exist on the destination you have three choices. Under options the first one is IfObjectExists and drop down list of IfObjectExists has three options.
1) Failtask: which indicates if task proceeded fails
2) Over write: which will over write previous logins
3) Skip: It ignores option of IfObjectExists.
Next come CopySids. If you set it to true then security identifiers (SIDs) associated with logins are also copied to the destination.
Then give ok and execute that task.
Now go to destination server and give normal credential which you used to give to log in to the server.
After logging in, go to SECURITY Folder and expand it. There you can see ROCKY Login user been created under logins subfolder. This is as shown in figure.
Now right click on ROCKY and Go for property at Destination NSW1069\ADMIN123 Server.
We can see window as follow.
Now give password as “dhina” and confirm the password. Check mark ENFORCE PASSWORD POLICY and ENFORCE PASSWORD EXPIRATION.
Now go to Server Roles. There check mark PUBLIC as shown.
Now restart SSMS by connecting NSW1069\ADMIN123 Server and Username as “ROCKY” and password as “dhina”
On giving so we are able to access only ROCKY database. If u try open to other database, a error is popped up saying ACCESS is DENIED
Comments
Post a Comment